CVE-2007-5326: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in 1 RPC and 2 rpcx.dll in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allow remote attackers to execute arbitrary code via unspecified vectors...

CVE-2007-5330: Improper Restriction of Operations within the Bounds of a Memory Buffer

The cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows remote attackers to 1 execute arbitrary code via stack-based buffer overflows in unspecified RPC procedures, and 2 trigger memory corruption related to the use of "handle" RPC arguments...

CVE-2007-5328

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

CVE-2007-5328: Undefined Security Weakness

The Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup r10.5, allows attackers to execute arbitrary code by using certain "insecure method calls" to modify the file system and registry, aka "Privileged function exposure."...

Microsoft Windows RPC认证远程拒绝服务漏洞（MS07-058）

BUGTRAQ ID: 25974 CVECAN ID: CVE-2007-2228 Microsoft Windows是微软发布的非常流行的操作系统。 Windows系统在处理RPC认证时存在漏洞，远程攻击者可能利用此漏洞导致系统拒绝服务。 漏洞具体存在于RPC运行时库rpcrt4.dll解析RPC级认证消息期间。在解析认证类型为NTLMSSP且认证级别为PACKET的报文时，如果验证尾部签名被初始化为0而不是标准的NTLM签名，就会出现无效的内存引用。成功利用这个漏洞可能导致RPC服务及整个操作系统崩溃。 Microsoft Windows XP SP2 Microsoft...

CA BrightStor ARCServe BackUp multiple security vulnerabilities

TCP/6504 RPC-based requests processing multiple buffer overflows...

CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability

hi full-disclosure, CA BrightStor ARCServe BackUp Message Engine Remote Stack Overflow Vulnerability by cocoruder of Fortinet Security Research Team http://ruder.cdut.net Summary: A remote stack overflow vulnerability exist in the RPC interface of CA BrightStor ARCServe BackUp. An arbitrary...

[CAID 35724, 35725, 35726]: CA BrightStor ARCserve Backup Multiple Vulnerabilities

Title: CAID 35724, 35725, 35726: CA BrightStor ARCserve Backup Multiple Vulnerabilities CA Vuln ID CAID: 35724, 35725, 35726 CA Advisory Date: 2007-10-10 Reported By: Anonymous researcher working with the iDefense VCP CVE-2007-5325 Dyon Balding of Secunia Research CVE-2007-5326 Cocoruder of...

Microsoft Windows RPC DoS

Denial of Service during authentication in RPC-based services...

ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability

ZDI-07-055: Microsoft Windows DCERPC Authentication Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-055.html October 10, 2007 -- CVE ID: CVE-2007-2228 -- Affected Vendor: Microsoft -- Affected Products: Windows 2000 SP4 Windows XP SP2 Windows 2003 SP1 Windows...

Microsoft Windows RPC NTLMSSP Authentication Denial of Service (MS07-058; CVE-2007-2228)

Remote Procedure Call RPC is a protocol that a program can use to request a service from another program which is located on another computer in a network. Microsoft Remote Procedure Call MS-RPC is Microsoft's implementation of RPC. MS-RPC uses the NTLM NT LAN Manager authentication protocol...

Microsoft Security Bulletin MS07-058 - Important Vulnerability in RPC Could Allow Denial of Service (933729)

Microsoft Security Bulletin MS07-058 - Important Vulnerability in RPC Could Allow Denial of Service 933729 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This update resolves a privately reported vulnerability. A denial of service vulnerability exists in the remote...

Microsoft Windows DCERPC Authentication Denial of Service Vulnerability

This vulnerability allows remote attackers to crash systems with vulnerable installations of the Microsoft Windows operating system. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RPC runtime library rpcrt4.dll during the parsing of RPC-level...

CVE-2007-2228

rpcrt4.dll aka the RPC runtime library in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and SP2, Server 2003 x64 Edition and x64 Edition SP2, and Vista and Vista x64 Edition allows remote attackers to cause a denial of service RPCSS service stop and system restart via an...

CVE-2007-2228

The CVE-2007-2228 entry describes a denial-of-service flaw in the RPC runtime library rpcrt4.dll on Windows platforms (XP SP2, XP x64, Server 2003 SP1/SP2, Server 2003 x64, Vista and Vista x64). The vulnerability occurs when parsing RPC authentication messages with NTLMSSP and PACKET level, where...

GLSA-200710-01 : RPCSEC_GSS library: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-01 RPCSECGSS library: Buffer overflow A stack based buffer overflow has been discovered in the svcauthgssvalidate function in file lib/rpc/svcauthgss.c when processing an overly long string in a RPC message. Impact : A remo...

Microsoft Windows RPC NTLMSSP Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted RPC packets. Attackers can exploit this issue to cause an affected computer to stop responding or to restart. Successful attacks will deny service to legitima...

MS07-058: Vulnerability in RPC Could Allow Denial of Service (933729)

The remote version of Windows contains a version of the RPC library protocol that is vulnerable to a denial of service attack in the NTLM authentication field. An attacker may exploit this flaw to crash the remote RPC server and the remote system. C Tenable Network Security, Inc...

RPCSEC_GSS library: Buffer overflow

Background librpcsecgss is an implementation of RPCSECGSS for secure RPC communications. Description A stack based buffer overflow has been discovered in the svcauthgssvalidate function in file lib/rpc/svcauthgss.c when processing an overly long string in a RPC message. Impact A remote attacker...

nfs security update

CentOS Errata and Security Advisory CESA-2007:0951 An updated nfs-utils-lib package to correct two security flaws is now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The nfs-utils-lib package contai...